Trusted surface
In AP2, a secure, non-agentic interface that shows mandate content to the user for authorisation and consent.
In the Agent Payments Protocol, a trusted surface is a secure, non-agentic interface that renders mandate content to the user for authorisation and consent; the result is a mandate. Separating this screen from the shopping agent lets the user see exactly what they approve, and gives a bank or wallet a place to apply strong customer authentication. The separation only helps if the surface is genuinely independent of the agent that proposed the purchase.
Agent Minute explains this term on 5 March 2027.
Related terms
Checkout MandateIn AP2, the mandate that authorises completing a checkout, bound in its closed form to a merchant-signed cart.Payment MandateIn AP2, the mandate that authorises payment for a checkout, verified by the credential provider, network and processor.Credentials providerIn AP2, a secure entity such as a digital wallet that manages and executes the user's payment and identity credentials.Strong customer authenticationAuthentication using two or more independent elements from knowledge, possession and inherence.